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VERSION OF AMENDMENTS 
WITH MARKINGS TO SHOW CHANGES MADE 

IN THE SPECIFICATION: 

Pagel, heading before paragraph [0001]: [Specification] -Background-. 
Page 1, paragraph [0001]: 

[0001] The present invention relates to a method for establishing a common key within a group 
of subscribers [according to the definition of the species in the independent claim] using a 
publicly known mathematical group and a publicly known element of the group . 

Page 1, paragraph [0005]: 

[0005] [The] A difficulty of the DH-key exchange lies in that Alice does not know whether she 
actually communicates with Bob or with a cheater. In the IP Sec- Standards of the Internet 
Engineering Task Force (IETF RFC 2412: The OAKLEY Key Determination Protocol), this 
problem is solved by using public key certificates in which the identity of a subscriber is 
combined with a public key by a trust center. In this manner, the identity of an interlocutor 
becomes verifiable. 

Page 4, paragraph [0014]: 

[0014] [The method according to] An object of the present invention [has to be suitable] is to 
provide a method for generating a common key within a group of at least three subscribers. The 
intention is for the method to be designed in such a manner that it stands out over the known 
methods by a small computational outlay and a small communication requirement (few rounds 
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even in the case of many subscribers). At the same time, however, it is intended to have a 
comparable security standard as the DH method. The method has to be easy to implement. 
Information on the structure of the group should not be required for carrying out the method. 

Page 6, paragraph [0026]: 

[0026] A variant of the method is to assign a special role to one of subscribers Tl-Tn for the 
execution of the second method step. If this role is assigned, for example, to subscriber Tl, then 
method steps 2 and 3 or b and c are executed only by subscriber Tl. In fourth method step d, all 
subscribers Tl-Tn involved in the method compute common key k according to the [equation] 
assignment k: = h(zl, g z2 , g 2 "), it being required for (xl, x2, xn) to be a function which is 
symmetrical in arguments x2, ... xn. This variant drastically reduces the number of messages to 
be sent. An example of such a function g is, for instance, 

k: = h(zl, g z \ g 2 ") = g zl zl • g 2221 ... g 2 " 21 . 

Page 9, heading: [METHOD FOR ESTABLISHING A COMMON KEY FOR A GROUP OF 
AT LEAST THREE SUBSCRIBERS]. 

Page 9 first line : -WHAT IS CLAIMED IS-- [(2) What is claimed is]. 

IN THE ABSTRACT: 

Please amend the abstract as follows: 
[The inventive method is based on] A method for establishing a common key for a group of at 
least three subscribers includes using a publicly known mathematical number group and a higher 
order element of the group g e G. In the first [work] step, a message corresponding to Ni: = g zl 
mod [p)] p is sent by each subscriber to all other subscribers (Tj), (zi) being a random number 
chosen from the set (1, p-2) by a random number generator. In the second [work] step, each 
subscriber (Ti) selects a transmission key kij: = (g^) 21 for each other subscriber (Tj) from the 
received message (g^), with i + j, for transmitting their random number (zi) to the subscribers 
(Tj). In the third [work] step, the common key k is calculated as k: = f(zl, z2, zn) for each 
subscriber Ti. 
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